Advisories » MGASA-2017-0377

Updated flash-player-plugin packages fix security vulnerability

Publication date: 18 Oct 2017
Modification date: 18 Oct 2017
Type: security
Affected Mageia releases : 5 , 6
CVE: CVE-2017-11292

Description

Adobe Flash Player 27.0.0.170 addresses a critical type confusion
vulnerability that could lead to code execution (CVE-2017-11292).

Adobe is aware of a report that an exploit for CVE-2017-11292 exists in
the wild, and is being used in limited, targeted attacks against users
running Windows.
                

References

• https://bugs.mageia.org/show_bug.cgi?id=21883
• https://helpx.adobe.com/security/products/flash-player/apsb17-32.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11292

SRPMS

6/nonfree

• flash-player-plugin-27.0.0.170-1.mga6.nonfree

5/nonfree

• flash-player-plugin-27.0.0.170-1.mga5.nonfree